v0.21.1

Infisical/agent-vaultv0.21.1May 20, 2026by github-actions[bot]

AI Summary

Fixed an issue where the default port was included in the outbound Host header, preventing signature schemes from matching correctly.

Key Highlights

Stripped default port from Host header
Fixed signature scheme matching

Full Release Notes

## Changelog
* 47de1f21ecb994c1ecfcead2e39f43bdab6000e7 mitm: strip default port from outbound Host header so signature schemes match (#195)

## Verify

```bash
# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt

# Verify signature (requires cosign v2+)
cosign verify-blob \
  --bundle checksums.txt.sig \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt
```